Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Eu9qJ7g-dvkghi4TAjZUKEYJjjI.roa
File: Eu9qJ7g-dvkghi4TAjZUKEYJjjI.roa (raw, json)
Hash identifier: wgJ+6f5RXVFQRfB8SMhev2eejWPBAFLXxmpmoxBNzHg=
Subject key identifier: 12:EF:6A:27:B8:3E:76:F9:20:86:2E:13:02:36:54:28:46:09:8E:32
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04BD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Eu9qJ7g-dvkghi4TAjZUKEYJjjI.roa
Signing time: Tue 13 May 2025 09:37:58 +0000
ROA not before: Tue 13 May 2025 09:37:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 09:37:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=12EF6A27B83E76F920862E130236542846098E32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:ca:ca:c4:f2:43:36:68:d9:59:7d:5d:bd:
53:b5:32:9e:44:71:86:cb:b3:30:9f:1d:a3:81:36:
9e:e7:c9:24:9c:30:08:c9:0f:23:7a:73:ed:e5:9f:
db:80:7c:e8:53:17:5b:cc:81:33:19:4e:3b:02:59:
1a:53:c5:3c:61:b2:a5:58:c5:a8:4b:06:d5:19:92:
e6:3c:cf:02:ec:d3:ad:4f:8a:30:e2:98:90:23:20:
f0:9a:6e:92:64:0c:ee:98:6f:94:dc:31:2d:86:a9:
ec:05:7d:1c:1d:92:72:96:fd:8d:2a:1a:ef:e9:02:
45:15:15:79:b9:3d:60:90:e3:ba:02:e2:2f:6a:de:
39:4d:af:bf:6d:1f:7b:7a:e1:cb:9c:35:d9:84:1a:
a0:a5:9a:0a:bb:68:3e:02:30:c5:63:bb:20:b1:d2:
6d:94:cb:e4:64:28:62:7e:b3:b2:02:6b:54:4b:c0:
87:d3:af:10:9f:8a:42:99:9e:57:b8:28:3d:35:9c:
b3:53:d0:b1:56:56:78:1c:dc:0f:2d:85:02:27:71:
1c:69:6e:c2:70:95:2b:0d:1d:6a:97:d5:cb:51:c0:
b9:e1:95:cf:3a:c5:ff:fa:6b:ce:a5:66:1c:4d:38:
04:91:83:f6:9e:01:82:5d:5f:cb:84:ec:84:6d:b4:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:6A:27:B8:3E:76:F9:20:86:2E:13:02:36:54:28:46:09:8E:32
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Eu9qJ7g-dvkghi4TAjZUKEYJjjI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:6d:f7:5f:ea:8f:dd:b4:9f:7c:53:cf:45:29:41:42:34:db:
03:d7:80:25:f1:5d:23:7b:59:70:3d:86:0f:0d:2f:da:d6:0c:
63:bb:64:64:c8:df:ec:24:88:42:a5:62:43:7e:8a:83:29:02:
5a:4f:35:30:7c:49:48:c7:fe:68:dd:02:54:49:ea:20:df:10:
ca:0e:84:24:af:01:d0:e2:d1:c1:86:20:f8:23:c4:2e:41:7b:
52:5c:a9:fb:af:ca:98:83:b2:0a:35:0e:94:63:bb:7f:64:e6:
70:f7:10:61:20:95:14:ed:ea:76:7b:9b:04:0e:5a:fd:8c:6d:
10:f0:f9:5c:8b:7d:22:11:81:53:a6:d9:43:f1:b8:b7:0d:a1:
de:34:06:da:1b:f6:03:df:71:50:c0:75:19:8a:04:46:5f:e1:
96:02:92:f1:00:d8:17:7f:8f:94:51:b0:6a:bb:ff:2a:74:0b:
ca:a4:cb:21:11:b9:22:1c:8e:f6:b0:36:a8:c6:4a:bc:b6:7c:
e2:04:10:da:51:3a:77:20:44:88:2c:55:d0:e6:2d:f4:5b:ad:
6d:07:3d:d9:5a:5f:99:59:6b:91:84:86:b7:9e:00:b0:62:4d:
6c:9f:ca:15:11:32:5c:3b:27:7d:fd:87:38:3d:36:f8:fc:2e:
40:ba:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:31:26 2025 by rpki-client